Security Issue : Your App Is Sending Advertising Id Over An Unencrypted Connection.

Discussion in 'Technical Discussion' started by Cristian, Dec 20, 2016.

  1. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Hi there,

    I am trying to update my app, did same process as before but in report i get this message for security tab in developer console:

    Your app is sending Advertising ID over an unencrypted connection.

    This isn't recommended because network intermediaries might be able to intercept it. You should use an encrypted connection when sending Advertising ID.


    Does anyone know how this could get fixed? Searched for solution but did not find anything yet.

    Many thanks,
    C
     
  2. playsgames6666

    playsgames6666 Miniboss Boxer

    Joined:
    Nov 13, 2015
    Messages:
    1,168
    Likes Received:
    745
    iOS , android, what version of BB,
    More info better the answer.
     
  3. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Hi, missed to add this:

    1. On android.
    2. BB 2.2.8

    Hope anyone else had this and have a fix since in prev update did not had this error.

    Thanks,
    C
     
    playsgames6666 likes this.
  4. playsgames6666

    playsgames6666 Miniboss Boxer

    Joined:
    Nov 13, 2015
    Messages:
    1,168
    Likes Received:
    745
    Im not sure. haven't seen this before.
    what ad network are you using.?
     
  5. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Vungle, admob, applovin, adcolony ( which does not work for some reason) .SDK 10
     
  6. playsgames6666

    playsgames6666 Miniboss Boxer

    Joined:
    Nov 13, 2015
    Messages:
    1,168
    Likes Received:
    745
    Man i don't know, hopefully someone else has an answer, haven't occurred that issue before.
     
  7. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Do you use atm sdk 10?
     
  8. playsgames6666

    playsgames6666 Miniboss Boxer

    Joined:
    Nov 13, 2015
    Messages:
    1,168
    Likes Received:
    745
    So the problem is one of the advertising SDK's is not using a SSL Connection, Thats what the security warning means.
    I don't use eclipse, i get my friend to build my APK's and publish my games, so I'm no help at all, Sorry.
     
  9. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Thanks man, will dig more into this. Cheers, C
     
    playsgames6666 likes this.
  10. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Doe anyone have any idea about this? Did these happen to any of you?

    I uploaded an apk version without any ads networks, just the PTAdHeyzap.jar that came out from BB and I am still getting that error.

    @Andy Do you have any ideas about this?

    Thanks,
    C
     
  11. Andy

    Andy Miniboss Boxer

    Joined:
    Sep 24, 2015
    Messages:
    2,152
    Likes Received:
    1,546
    No, never seen it before. There is not much in Google searches about this so it's something new Google is doing. If it's not preventing you from publishing I would move forward. It will probably take a few weeks before we all know what this is about and what is causing it.
     
  12. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Hi Andy,

    The idea is that it does this right after I export the game from eclipse. No ads integrated except what came from BB.

    So BB Export > Import to eclipse > Export from eclipse > Uploaded to google > Get that from pre-launch report as security warning..

    Anyone any ideas?
    Thanks,
    C
     
    Last edited: Dec 21, 2016
  13. Andy

    Andy Miniboss Boxer

    Joined:
    Sep 24, 2015
    Messages:
    2,152
    Likes Received:
    1,546
    OK, I'm confused. I thought you said it was coming from the developer dashboard?

    Where is this message appearing? On device? Inside Eclipse? From your Google Play developer dashboard?
     
  14. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Sry if I mad this confusing. The security warning is coming from developer console after the build is uploaded and checked in the pre-launch report. After report is done i am getting some stats and now I get this one. Same happened with some libs error security while ago and was fixed by BB2.2.5 if I am not wrong.
     
  15. Andy

    Andy Miniboss Boxer

    Joined:
    Sep 24, 2015
    Messages:
    2,152
    Likes Received:
    1,546
    Is it preventing you from moving on? Usually warnings are just a caution... and don't prevent continuing. Usually errors prevent you from continuing.
     
  16. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    I think it does not but since data can be read by a 3rd party since is not encrypted is not a good thing. It should be encrypted by default. Not sure what is the issue exactly :/
     
  17. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Off topic but still related to SDK 10.

    Could you tell me if on your side or anyone else there is experience the black screen delay on android? For sdk 10?

    On SKD 9.6 after close ad was made user was back in the game.

    Now on SKD10 there is some sort of black screen delay that takes 4-5 sec and after that user is back on the game.

    Asked on forum but nobody answered yet. I am sure they did implement sdk10.
    On ios there is no delay.

    Thanks for your support,
    C
     
  18. Andy

    Andy Miniboss Boxer

    Joined:
    Sep 24, 2015
    Messages:
    2,152
    Likes Received:
    1,546
    OK, well it would be important to know for sure. I'll try to look into it and see if I can duplicate your issue. It's up to you if you want to continue or not. This may or may not be something under our control or it may be a false positive to the new Google detection. I would not let it stop me from publishing while it's being investigated. That is just me though.

    Please don't post this in multiple places. One thread is enough, otherwise things get confusing. Best to keep to one topic per thread. I don't know why this particular delay is happening, seems like an issue with one of the 3rd party SDK.
     
  19. Cristian

    Cristian Avid Boxer

    Joined:
    Aug 1, 2016
    Messages:
    143
    Likes Received:
    27
    Thanks for your support. Will post here news once i'll have them, will dig more into this. Regards,C
     

Share This Page